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1. A system for locating and managing private network services using private addresses 



a host computer executing a plurality of private virtual servers, each private virtual 
server associaten with a private address space and providing private network 
services to a plurality of private network users located remotely from the 
private virtual/server; and 

a multiplexing/demijlltiplexing mechanism executed by the host computer, and 
communicatiA^ely coupledfto a network to receive signals from any of the 
private networks users, and to route a received signal to the private virtual 
server associated with the private network user. 

2. The system of claim 1 wherein the multiplexing/demultiplexing mechanism switches 
signals between private virtual servers and tunnels associated with private network users. 

3. The system of claim 1, wherein the multiplexing/demultiplexing mechanism 
demultiplexes an incoming set of signals into segregated signals, and routes each segregated 
signal to the private virtual server associated with the private network that transmitted the 
segregated signal. 



4. The system of c 
an outgoing set of signals}, 
private virtual server that 



aim 1, wherein the muUiplexing/demultiplexing mechanism receives 
and routes the signals to an outgoing tunnel associated with the 
transmitted the signals. 
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2 5. The system of claim 1, wherein the multiplexing/demultiplexing mechanism is located 

2 on the host computer. 

2 6. The system of claim 1, wherein the multiplexing/demultiplexing mechanism contains 

2 a lookup table, the lookup table storing associations between tunnel identifiers identifying 

3 tunnels for private networks and private virtual servers that service the private networks. 

1 7. A system for locating and managing private network services in a location remote 

2 from private network users, comprising: 

3 a plurality of host server computers; 

4 a plurality of private virtual servers, each private virtual server adapted to execute on 

5 one of the plurality of host server computers wherein each private virtual 

6 server is associated with a private network user; 

7 a switching mechanism communicatively connected to the plurality of host server 

8 computers to receive signals from the private network users and route each 

9 signal to the host server computer executing the private virtual server 

10 associated with the private network user; and 

11 a multiplexing/demultiplexing mechanism communicatively coupled to the switching 

12 mechanism for receiving signals from the switching mechanism and routing 

13 signals to the correct private virtual server executing on the host server. 

1 8. The system of claim 7, wherein the signals are addressed using a private address 

2 space. 
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1 9. The system of claim 7, further including: 

2 at least one tunnel for transmitting a signal between a customer's private network and 

3 the switching mechanism. 

1 10. A system for managing virtual servers using private addresses wherein the private 

2 addresses overlap, and wherein the virtual servers are located in a location remote from private 

3 network users, comprising: 

4 a plurality of host computers; 

5 a plurality of virtual servers residing on the plurality of host computers; 

6 a tunnel switching mechanism communicatively coupled to the host computers, and 

7 communicatively coupled to the network to receive signals from any of the 

8 private networks users, to route received signals to each host computer 

9 executing the virtual server associated with the private network user; and 

10 a multiplexing/demultiplexing mechanism executed by each host computer, and 

n communicatively coupled to a network to receive signals from any of the 

12 private networks users, and to route received signals to the virtual server 

13 executing on the host computer that is associated with the private network 

14 user. 

1 11. The system of claim 10, wherein the private address spaces of a first and a second 

2 virtual server overlap. 
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1 12. The system of claim 10, further including: 

2 a customer lookup table, the customer lookup table storing associations between 

3 physical interfaces and tunnel identifiers identifying tunnels for private 

4 networks and a plurality of customer forwarding tables; and 

5 a plurality of customer forwarding tables, each customer forwarding table associating 

6 network addresses with physical interfaces and tunnel identifiers. 

1 13. In a system comprising a host computer containing a plurality of virtual servers that 

2 each support a private address space wherein the private addresses of two or more of the virtual 

3 servers overlap, a method for locating and managing private network services in a data center 

nj 

m 4 location remote firom private network users of the virtual servers, the method comprising: 

%^ 5 receiving a transmission addressed using a private address of a recipient; and 

6 routing the transmission to a virtual server associated with at least one of the sender 

yj 

^*^'! 7 or the recipient of the transmission. 

yi 

1 14. The method of claim 13, further comprising receiving the transmission via a tunnel 

2 from a private network. 

3 15. The method of claim 13, further comprising routing the transmission based upon a 
2 layer two timnel identifier. 
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2 16. The method of claim 13, wherein routing the transmission to a virtual server 

2 comprises: 

3 terminating an incoming timnel containing a transmission; and 

4 muhiplexing the transmission to a virtual server. 

2 17. The method of claim 16, including: 

2 reading a tunnel identifier contained in the transmission; and 

3 selecting a virtual server based upon the timnel identifier. 

1 18. The method of claim 13, wherein routing the transmission . to a virtual server 

2 comprises: 

3 terminating an incoming tunnel containing a transmission; 

4 switching the transmission to a tunnel connected to a physical host computer 

5 containing a customer's virtual server; 

6 terminating the tunnel at the physical host computer; and 

7 multiplexing the transmission to the virtual server. 
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19. In a system comprising a host computer containing a plurality of virtual servers 
which support a private address space wherein a first and a second virtual server private address 
overlap, a method for performing private network services using private addresses in a location 
remote from private network users, comprising: 

storing a customer lookup table, the customer lookup table storing associations 
between physical interfaces and tunnel identifiers identifying timnels for 
private networks and a plurality of customer forwarding tables; 

storing a plurality of customer forwarding tables, the customer forwarding tables 
associating network addresses with physical interfaces and txmnel identifiers; 

receiving a transmission on a physical interface, the transmission containing a tunnel 
identifier; 

determining the correct customer forwarding table from the customer lookup table 
using the physical interface and the tunnel identifier; 

determining via the customer forwarding table a physical interface and tunnel 
identifier associated with a network address of the transmission; and 

sending the transmission to the network address on the determined physical interface 
using the determined tunnel identifier. 
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1 20. In a system comprising a host computer containing a plurality of virtual servers 

2 which support a private address space wherein a first and a second virtual server private address 

3 overlap, a method for a private network to use private network services, wherein the private 

4 network services are located remotely firom the private network, the method comprising: 

5 sending a privately addressed transmission on a tunnel to a virtual server; and 

6 receiving a privately addressed transmission back fi-om the virtual server. 

1 21. The method of claim 20, wherein the privately addressed transmission does not 

2 include a registered IP address. 

1 22. The method of claim 20, wherein the tunnel encapsulates the privately-addressed 

2 transmissions in a layer two protocol. 

1 23. The method of claim 20, further comprising: 

2 segregating a first transmission including an Internet address fi'om a second 

3 transmission including a virtual server address; and 

4 sending the second transmission on a tunnel. 

2 24. A method for creating a software architecture suitable for implementing a virtual 

2 server system using private addresses wherein the private addresses overlap, the method 

3 comprising: 

4 implementing a tunneling protocol to tunnel privately-addressed transmissions 

5 between a plurality of virtual servers and a plurality of users; and 
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6 implementing a separate routing context on behalf of each user to route privately- 

7 addressed transmissions between the users and the virtual servers. 

1 25. The method of claim 24, wherein the tunneling protocol is Asynchronous Transfer 

2 Mode virtual circuits. 

1 26. The method of claim 24, wherein the tunneling protocol is frame relay virtual 

2 circuits. 

1 27. The method of claim 24, wherein the timneling protocol is the Point-to-Point 

2 protocol across the Layer two Tunneling Protocol. 

1 28. The method of claim 24, wherein the tunneling protocol is the Internet Protocol 

2 security protocol. 

3 29. A computer program product for switching signals between private virtual servers 

2 and tunnels associated with private network users, the computer program product comprising: 

3 program code for demultiplexing an incoming set of signals into segregated signals; 

4 and 

5 program code for routing each segregated signal to the private virtual server 

6 associated with the private network user that transmitted the segregated signal. 

1 30. The computer program product of claim 29, further including: 

2 program code for receiving an outgoing signal; and 
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program code for routing the signal to an outgoing tunnel associated with the private 
virtual server that transmitted the signal. 

31. A computer program product for managing virtual servers using private addresses 
v^herein the private addresses overlap, and wherein the virtual servers are located in a location 
remote from private network users, the computer program product comprising: 

program code for creating a plurality of virtual servers residing on a plurality of host 
computers; 

program code to receive signals from any of the private networks users, and to route 
received signals to each host computer executing the virtual server associated 
with the private network user; and 

program code to route received signals to the virtual server executing on the host 
computer that is associated with the private network user. 

32. The computer program product of claim 31, fiirther including: 

program code for storing associations between physical interfaces and tunnel 
identifiers identifying tunnels for private networks, and a plurality of customer 
forwarding tables; and 

program code for creating a plurality of customer forwarding tables, each customer 
forwarding table associating network addresses with physical interfaces and 
tunnel identifiers. 
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